@tstdl/base 0.85.19 → 0.85.21

package/.eslintrc.json

@@ -26,6 +26,7 @@
   "rules": {
     /** typescript */
     "@typescript-eslint/brace-style": ["error", "stroustrup", { "allowSingleLine": true }],
+    "@typescript-eslint/class-methods-use-this": ["error", { "ignoreOverrideMethods": true, "ignoreClassesThatImplementAnInterface": true }],
     "@typescript-eslint/consistent-type-definitions": "off",
     "@typescript-eslint/explicit-function-return-type": ["error", { "allowExpressions": true }],
     "@typescript-eslint/explicit-member-accessibility": ["error", { "accessibility": "no-public" }],

package/authentication/server/authentication-secret-requirements.validator.d.ts

@@ -1,9 +1,18 @@
 import type { SecretCheckResult } from '../models/secret-check-result.model.js';
+export type SecretTestResult = {
+    success: true;
+    reason?: undefined;
+} | {
+    success: false;
+    reason: string;
+};
 export declare abstract class AuthenticationSecretRequirementsValidator {
-    abstract checkSecretRequirements(secret: string): SecretCheckResult | Promise<SecretCheckResult>;
-    abstract validateSecretRequirements(secret: string): void | Promise<void>;
+    abstract checkSecretRequirements(secret: string): Promise<SecretCheckResult>;
+    abstract testSecretRequirements(secret: string): Promise<SecretTestResult>;
+    abstract validateSecretRequirements(secret: string): Promise<void>;
 }
 export declare class DefaultAuthenticationSecretRequirementsValidator extends AuthenticationSecretRequirementsValidator {
     checkSecretRequirements(secret: string): Promise<SecretCheckResult>;
+    testSecretRequirements(secret: string): Promise<SecretTestResult>;
     validateSecretRequirements(secret: string): Promise<void>;
 }

package/authentication/server/authentication-secret-requirements.validator.js

@@ -43,13 +43,20 @@ let DefaultAuthenticationSecretRequirementsValidator = class DefaultAuthenticati
   async checkSecretRequirements(secret) {
     return (0, import_password_check.checkPassword)(secret, { checkForPwned: true });
   }
-  async validateSecretRequirements(secret) {
+  async testSecretRequirements(secret) {
     const result = await this.checkSecretRequirements(secret);
     if ((0, import_type_guards.isNumber)(result.pwned) && result.pwned > 0) {
-      throw new import_secret_requirements_error.SecretRequirementsError("Password is exposed in data breach (https://haveibeenpwned.com/passwords).");
+      return { success: false, reason: "Password is exposed in data breach (https://haveibeenpwned.com/passwords)." };
     }
     if (result.strength < import_password_check_result_model.PasswordStrength.Medium) {
-      throw new import_secret_requirements_error.SecretRequirementsError("Password is too weak.");
+      return { success: false, reason: "Password is too weak." };
+    }
+    return { success: true };
+  }
+  async validateSecretRequirements(secret) {
+    const result = await this.testSecretRequirements(secret);
+    if (!result.success) {
+      throw new import_secret_requirements_error.SecretRequirementsError(result.reason);
     }
   }
 };

package/authentication/server/authentication.service.d.ts

@@ -3,6 +3,7 @@ import { afterResolve } from '../../container/index.js';
 import type { Record } from '../../types.js';
 import type { RefreshToken, SecretCheckResult, SecretResetToken, Token } from '../models/index.js';
 import { AuthenticationCredentialsRepository } from './authentication-credentials.repository.js';
+import type { SecretTestResult } from './authentication-secret-requirements.validator.js';
 import { AuthenticationSecretRequirementsValidator } from './authentication-secret-requirements.validator.js';
 import { AuthenticationSecretResetHandler } from './authentication-secret-reset.handler.js';
 import { AuthenticationSessionRepository } from './authentication-session.repository.js';
@@ -50,6 +51,10 @@ export type TokenResult<AdditionalTokenPayload extends Record = Record<never>> =
     jsonToken: Token<AdditionalTokenPayload>;
     refreshToken: string;
 };
+export type SetCredentialsOptions = {
+    /** skip validation for password strength */
+    skipValidation?: boolean;
+};
 type CreateTokenResult<AdditionalTokenPayload extends Record> = {
     token: string;
     jsonToken: Token<AdditionalTokenPayload>;
@@ -79,7 +84,7 @@ export declare class AuthenticationService<AdditionalTokenPayload extends Record
     constructor(credentialsRepository: AuthenticationCredentialsRepository, sessionRepository: AuthenticationSessionRepository, authenticationSecretRequirementsValidator: AuthenticationSecretRequirementsValidator, subjectResolver: AuthenticationSubjectResolver | undefined, tokenPayloadProvider: AuthenticationTokenPayloadProvider<AdditionalTokenPayload, AuthenticationData> | undefined, authenticationResetSecretHandler: AuthenticationSecretResetHandler | undefined, options: AuthenticationServiceOptions);
     [afterResolve](): Promise<void>;
     initialize(): Promise<void>;
-    setCredentials(subject: string, secret: string): Promise<void>;
+    setCredentials(subject: string, secret: string, options?: SetCredentialsOptions): Promise<void>;
     authenticate(subject: string, secret: string): Promise<AuthenticationResult>;
     getToken(subject: string, authenticationData: AuthenticationData): Promise<TokenResult<AdditionalTokenPayload>>;
     endSession(sessionId: string): Promise<void>;
@@ -87,6 +92,8 @@ export declare class AuthenticationService<AdditionalTokenPayload extends Record
     initResetSecret(subject: string): Promise<void>;
     resetSecret(tokenString: string, newSecret: string): Promise<void>;
     checkSecret(secret: string): Promise<SecretCheckResult>;
+    testSecret(secret: string): Promise<SecretTestResult>;
+    validateSecret(secret: string): Promise<void>;
     validateToken(token: string): Promise<Token<AdditionalTokenPayload>>;
     validateRefreshToken(token: string): Promise<RefreshToken>;
     validateSecretResetToken(token: string): Promise<SecretResetToken>;

package/authentication/server/authentication.service.js

@@ -116,9 +116,11 @@ let AuthenticationService = class AuthenticationService2 {
       this.derivedSecretResetTokenSigningSecret = this.options.secret.secretResetTokenSigningSecret;
     }
   }
-  async setCredentials(subject, secret) {
+  async setCredentials(subject, secret, options) {
     const actualSubject = await this.resolveSubject(subject);
-    await this.authenticationSecretRequirementsValidator.validateSecretRequirements(secret);
+    if (options?.skipValidation != true) {
+      await this.authenticationSecretRequirementsValidator.validateSecretRequirements(secret);
+    }
     const salt = (0, import_random.getRandomBytes)(32);
     const hash = await this.getHash(secret, salt);
     const credentials = {
@@ -212,6 +214,12 @@ let AuthenticationService = class AuthenticationService2 {
   async checkSecret(secret) {
     return this.authenticationSecretRequirementsValidator.checkSecretRequirements(secret);
   }
+  async testSecret(secret) {
+    return this.authenticationSecretRequirementsValidator.testSecretRequirements(secret);
+  }
+  async validateSecret(secret) {
+    return this.authenticationSecretRequirementsValidator.validateSecretRequirements(secret);
+  }
   async validateToken(token) {
     return (0, import_helper.getTokenFromString)(token, this.tokenVersion, this.derivedTokenSigningSecret);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tstdl/base",
-  "version": "0.85.19",
+  "version": "0.85.21",
   "author": "Patrick Hein",
   "publishConfig": {
     "access": "public"
@@ -45,7 +45,7 @@
     "typescript": "5.1"
   },
   "peerDependencies": {
-    "@elastic/elasticsearch": "^8.8",
+    "@elastic/elasticsearch": "^8.9",
     "@koa/router": "^12.0",
     "@tstdl/angular": "^0.85",
     "@zxcvbn-ts/core": "^3.0",